Memory Buffer Bounds Error — CVEs by weakness type

Nagios HIGH 7.5

CVE-2012-6096EPSS 66%

Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x be…

Fix: after 3.4.3

Fix from $1,950 2013-01-22

Linux Kernel MEDIUM 6.9

CVE-2012-2137

Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash)…

Fix: 3.0.72 / 3.2.24+

Fix from $1,600 2013-01-22

Linux Kernel MEDIUM 5.0

CVE-2012-3364

Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remote attack…

Fix: after 3.4.4

Fix from $1,600 2013-01-22

Linux Kernel MEDIUM 5.2

CVE-2012-2119

Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest us…

Fix: after 3.4.4

Fix from $1,600 2013-01-22

Simatic Rf Manager MEDIUM 6.8

CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers …

Fix: after 3.0

Fix from $1,600 2013-01-21

Interactive Graphical Scada System HIGH 10.0

CVE-2013-0657EPSS 21%

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitra…

Fix: after 10.0

Fix from $1,950 2013-01-21

Utorrent MEDIUM 6.8

CVE-2009-5134EPSS 8%

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build 16010), a…

No fix yet

Fix from $1,600 2013-01-18

Networker HIGH 9.3

CVE-2012-4607

Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code…

Mitigation only

Fix from $1,950 2013-01-17

Chrome MEDIUM 5.0

CVE-2013-0833

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.

Fix: after 24.0.1312.51

Fix from $1,600 2013-01-15

Chrome MEDIUM 5.0

CVE-2013-0834

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.

Fix: after 24.0.1312.51

Fix from $1,600 2013-01-15

Chrome MEDIUM 5.0

CVE-2012-5152

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on …

Fix: after 24.0.1312.51

Fix from $1,600 2013-01-15

Chrome HIGH 7.5

CVE-2012-5153

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspec…

Fix: after 24.0.1312.51

Fix from $1,950 2013-01-15

Firefox HIGH 9.3

CVE-2013-0752EPSS 7%

Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15…

Fix: 2.15 / 17.0.2+

Fix from $1,950 2013-01-13

Flash Player HIGH 10.0

CVE-2013-0630EPSS 8%

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.…

Fix: after 11.1.115.34

Fix from $1,950 2013-01-11

Acrobat HIGH 10.0

CVE-2013-0611EPSS 7%

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vecto…

Mitigation only